Fortinet FortiSIEM Operating System Command Injection Vulnerability (CNVD-2024-13100)

Fortinet FortiSIEM is a suite of security information and event management systems from the American company Fiat (Fortinet). The system includes features such as asset discovery, workflow automation and unified management. Fortinet FortiSIEM suffers from an operating system command injection vulnerability that stems from improper neutralization of special elements. An attacker could exploit this vulnerability to execute arbitrary commands on the system.